RSPAN

[gabelz]

HI all,

i'm quite new to RSPAN y sincererly didn't get it very well.

Ok is for monitoring interface traffic for interface is configured,ok i configure the "sending port" and "receiving port in monitoring",but where this traffic is forwarded?Where can i check this traffic to analyze it?

And ,other thing,why i have OQD constantly on RSPAN sending port?Is a normal behaviour?

Thanks for clarification.

BR,

MG

[balaji.bandi]

First you need to understand SPAN and RSPAN

SPAN you are monitor source and destination on same switch

RSPAN - Remote Span you sending the source of informaiton to Another Switch to sniff the traffic.

so you need to provide more information, what device model, IOS code, how is your configuration looks like ?

check some examples :

https://community.cisco.com/t5/networking-knowledge-base/understanding-span-rspan-and-erspan/ta-p/3144951

Where can i check this traffic to analyze it?  - Destination port you can run Wireshark or any sniffer to receive the traffic

[gabelz]

Hi Balaji,thanks for your reply:

SW1#sh monitor session all

Session 1

---------

Type                     : Remote Source Session

Source Ports             : 

    RX Only              : Gi1/4-10,Gi2/1-16

Dest RSPAN VLAN          : 230

SW1#sh run int GigabitEthernet1/3

Building configuration...

Current configuration : 168 bytes

!

interface GigabitEthernet1/3

 description uplink to Sw2 -RSPAN

 switchport trunk allowed vlan 230

 switchport mode trunk

 switchport nonegotiate

end

SW1->Cisco IOS XE Version 17.6.3  IE-3400-8T2S

SW2#sh monitor session all

Session 2

---------

Type                     : Local Session

Source VLANs             :

    RX Only              : 200,202-203,209,230-235,261,270,294,350,685,695,751-766,989

Destination Ports        : Te1/0/31

    Encapsulation        : Native

          Ingress        : Disabled

SW2#sh int Te1/0/31

TenGigabitEthernet1/0/31 is up, line protocol is down (monitoring)

claroty device connected on port TenGigabitEthernet1/0/31

SW2->(CAT9K_IOSXE), Version 16.12.4

BR,

MG